Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/rvqu1safjRLAF6KvzQ7EIXBDtAw.roa
File: rvqu1safjRLAF6KvzQ7EIXBDtAw.roa (raw, json)
Hash identifier: l1iJNOWrCthSzMX4gh9W3WWiCyK3s7TGkqXWkdDcu9c=
Subject key identifier: AE:FA:AE:D6:C6:9F:8D:12:C0:17:A2:AF:CD:0E:C4:21:70:43:B4:0C
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019DCE8FDA7329221D203AE9880134CDB082
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/rvqu1safjRLAF6KvzQ7EIXBDtAw.roa
Signing time: Mon 27 Apr 2026 10:50:27 +0000
ROA not before: Mon 27 Apr 2026 10:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 2a10:3e80::/29 maxlen: 29
2a13:5040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:8f:da:73:29:22:1d:20:3a:e9:88:01:34:cd:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 27 10:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aefaaed6c69f8d12c017a2afcd0ec4217043b40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:fa:8c:14:b5:18:28:8d:8e:60:26:f9:f1:
83:2c:28:f0:52:9a:85:87:2a:5b:61:e0:c6:36:ed:
63:3b:4b:b1:05:72:08:bc:e5:9c:79:bb:dd:24:32:
15:5c:1d:ff:ba:0b:12:eb:db:18:e3:e1:f8:df:33:
67:b3:a5:f3:3f:8a:bc:0c:c3:e8:cc:71:98:21:fb:
8e:9c:27:4a:f0:fc:a6:0a:bc:2f:cb:dc:d9:9f:35:
15:c8:e9:83:85:ac:1d:f9:a1:75:d2:c2:82:1b:c3:
e7:58:6d:21:67:ec:04:44:89:1f:35:1d:4f:66:15:
8c:22:a4:9b:9c:c7:7d:7f:eb:94:88:43:1a:98:89:
62:c6:d6:4a:b6:8a:d6:e0:0f:5c:60:96:c0:94:85:
a0:fe:0c:e8:72:ee:43:c2:f1:0c:60:4f:4d:38:e1:
15:be:0b:87:34:f0:31:b6:e8:df:a5:05:75:fb:5e:
36:0d:a9:00:06:f7:26:f2:6b:74:97:e7:71:0f:f8:
e5:f5:c8:f0:ea:c6:ba:8e:9b:36:e8:7b:ec:4e:b6:
ff:25:21:51:8f:2d:c1:d8:3a:9e:c5:12:3d:fa:7c:
9e:0a:4d:b3:c9:2e:c1:81:f1:17:8f:c7:99:b1:23:
69:34:28:f2:14:11:15:f7:6f:2c:c9:aa:2f:06:e1:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FA:AE:D6:C6:9F:8D:12:C0:17:A2:AF:CD:0E:C4:21:70:43:B4:0C
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/rvqu1safjRLAF6KvzQ7EIXBDtAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3e80::/29
2a13:5040::/29
Signature Algorithm: sha256WithRSAEncryption
76:d9:a0:89:82:4b:99:f1:33:a4:c4:0f:84:a2:75:da:82:af:
b6:92:f0:6c:a0:9b:bd:79:8a:c3:c2:4a:a0:0c:a4:aa:a3:98:
5a:9c:51:36:d2:a1:9d:41:3a:df:1e:56:3b:75:17:a7:67:f3:
ef:86:0c:c2:51:0f:0b:19:6f:5d:46:2a:a5:1b:49:d6:fd:bd:
61:e7:42:f4:a1:56:0f:20:5f:e3:bf:59:17:fb:b9:89:ae:7f:
da:28:92:a5:da:99:c8:4b:49:30:28:5a:9d:e0:f9:4c:16:f4:
8a:0f:f2:a6:da:89:be:8a:19:e3:f3:95:be:26:6f:15:ff:17:
3e:2c:e4:ff:4f:eb:b0:6e:74:5f:09:7c:1e:69:e1:2c:f5:94:
af:5e:8a:e2:63:cb:af:ed:72:bc:86:62:0f:49:c9:47:3c:91:
3e:4e:34:41:74:eb:09:19:00:fe:c4:5e:5f:e9:0c:e7:75:48:
07:67:81:0f:b2:aa:32:81:d8:51:66:d0:d2:6c:96:41:d7:62:
28:27:b9:7d:aa:fc:1d:05:31:da:11:46:a7:b6:4b:36:5c:07:
48:84:cb:a0:4b:df:70:cd:b6:77:8d:9a:5f:61:ab:8f:5c:e6:
d6:32:b0:2b:fc:5c:80:fb:09:59:e5:b9:24:ae:ec:af:64:af:
1d:e4:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:30 2026 by rpki-client